Preventing the npm Debug/Chalk Compromise in 200 lines of Javascript